diff --git a/go/ql/lib/ext/github.com.valyala.fasthttp.model.yml b/go/ql/lib/ext/github.com.valyala.fasthttp.model.yml index 9585ca22401..b18b80882a5 100644 --- a/go/ql/lib/ext/github.com.valyala.fasthttp.model.yml +++ b/go/ql/lib/ext/github.com.valyala.fasthttp.model.yml @@ -25,3 +25,15 @@ extensions: - ["github.com/valyala/fasthttp", "URI", True, "PathOriginal", "", "", "ReturnValue[0]", "remote", "manual"] - ["github.com/valyala/fasthttp", "URI", True, "QueryString", "", "", "ReturnValue[0]", "remote", "manual"] - ["github.com/valyala/fasthttp", "URI", True, "String", "", "", "ReturnValue[0]", "remote", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "Body", "", "", "ReturnValue[0]", "request", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "BodyGunzip", "", "", "ReturnValue[0]", "request", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "BodyInflate", "", "", "ReturnValue[0]", "request", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "BodyStream", "", "", "ReturnValue[0]", "request", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "BodyUnbrotli", "", "", "ReturnValue[0]", "request", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "BodyUncompressed", "", "", "ReturnValue[0]", "request", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "ContinueReadBody", "", "", "Argument[0]", "request", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "ContinueReadBodyStream", "", "", "Argument[0]", "request", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "Host", "", "", "ReturnValue[0]", "request", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "ReadBody", "", "", "Argument[0]", "request", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "ReadLimitBody", "", "", "Argument[0]", "request", "manual"] + - ["github.com/valyala/fasthttp", "Request", True, "RequestURI", "", "", "ReturnValue[0]", "request", "manual"] diff --git a/go/ql/lib/semmle/go/frameworks/Fasthttp.qll b/go/ql/lib/semmle/go/frameworks/Fasthttp.qll index 247a6f4fe91..cf4803e1dbe 100644 --- a/go/ql/lib/semmle/go/frameworks/Fasthttp.qll +++ b/go/ql/lib/semmle/go/frameworks/Fasthttp.qll @@ -405,14 +405,16 @@ module Fasthttp { */ module Request { /** - * DEPRECATED: Use `RemoteFlowSource` instead. + * DEPRECATED: Use `RemoteFlowSource::range` instead. */ deprecated class UntrustedFlowSource = RemoteFlowSource; /** + * DEPRECATED: Use `RemoteFlowSource::range` instead. + * * The methods as Remote user controllable source which can be many part of request. */ - class RemoteFlowSource extends RemoteFlowSource::Range instanceof DataFlow::Node { + deprecated class RemoteFlowSource extends RemoteFlowSource::Range instanceof DataFlow::Node { RemoteFlowSource() { exists(Method m | m.hasQualifiedName(packagePath(), "Request",